Critical assessment of the quality, relevance, understanding and effectiveness of the current Risk Policies in today’s environment. Are they easy to understand, user friendly, targeted at the right individuals in the bank, easily accessible, well communicated to the extent that they are used and add value? Do they protect the bank adequately, whilst at the same time providing enough intelligent space for business to be done?